Update Reject Hosts & Tighten the Phishing Hosts

This commit is contained in:
SukkaW 2025-03-02 16:02:41 +08:00
parent 22676ed0b2
commit 0f7799b8f1
2 changed files with 30 additions and 10 deletions

View File

@ -88,6 +88,11 @@ const sensitiveKeywords = createKeywordFilter([
'allegrolokalnie', 'allegrolokalnie',
'thetollroads' 'thetollroads'
]); ]);
const fakeTldKeywords = createKeywordFilter([
'.pl-',
'.com-',
'.net-'
]);
const lowKeywords = createKeywordFilter([ const lowKeywords = createKeywordFilter([
'transactions-', 'transactions-',
'payment', 'payment',
@ -111,7 +116,8 @@ const lowKeywords = createKeywordFilter([
'passwordreset', 'passwordreset',
'.google-', '.google-',
'recover', 'recover',
'banking' 'banking',
'shop'
]); ]);
const processPhihsingDomains = cache(function processPhihsingDomains(domainArr: string[]): string[] { const processPhihsingDomains = cache(function processPhihsingDomains(domainArr: string[]): string[] {
@ -195,12 +201,14 @@ const processPhihsingDomains = cache(function processPhihsingDomains(domainArr:
} }
}); });
// console.log({ if (require.main === module) {
// score: domainScoreMap['awicksin.com'], console.log({
// count: domainCountMap.get('awicksin.com') v: 1,
// }); score: domainScoreMap['com-paytollbydv.world'],
count: domainCountMap.get('com-paytollbydv.worldx'),
// console.log({ duplicateCount, domainArrLen: domainArr.length }); domainArrLen: domainArr.length
});
}
return domainArr; return domainArr;
}, { }, {
@ -241,14 +249,25 @@ export function calcDomainAbuseScore(subdomain: string, fullDomain: string = sub
const hitLowKeywords = lowKeywords(fullDomain); const hitLowKeywords = lowKeywords(fullDomain);
const sensitiveKeywordsHit = sensitiveKeywords(fullDomain); const sensitiveKeywordsHit = sensitiveKeywords(fullDomain);
const fakeTldKeywordsHit = fakeTldKeywords(fullDomain);
if (sensitiveKeywordsHit) { if (sensitiveKeywordsHit) {
weight += 10; weight += 15;
if (hitLowKeywords) { if (hitLowKeywords) {
weight += 6; weight += 10;
if (fakeTldKeywordsHit) {
weight += 8;
}
}
// besides add for low hit, always add extra here
if (fakeTldKeywordsHit) {
weight += 10;
} }
} else if (hitLowKeywords) { } else if (hitLowKeywords) {
weight += 1.7; weight += 1.8;
if (fakeTldKeywordsHit) {
weight += 5;
}
} }
const subdomainLength = subdomain.length; const subdomainLength = subdomain.length;

View File

@ -55,6 +55,7 @@ DOMAIN-KEYWORD,adktrack
DOMAIN-KEYWORD,track.msadcenter DOMAIN-KEYWORD,track.msadcenter
DOMAIN-KEYWORD,dc.pimentaafricana DOMAIN-KEYWORD,dc.pimentaafricana
DOMAIN-KEYWORD,-txtagstore DOMAIN-KEYWORD,-txtagstore
DOMAIN-KEYWORD,thetollroads-
DOMAIN,stun.smartgslb.com DOMAIN,stun.smartgslb.com